This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32342e302f32342d3234203d3e203237393831.roa
File:                     3137302e38302e32342e302f32342d3234203d3e203237393831.roa (raw, json)
Hash identifier:          /0/EVoqGDRcqyZIz9iewa2Fyg1ThN885K0PvFSwSlNI=
Subject key identifier:   2B:1A:63:08:EF:F9:88:E1:46:AC:15:3A:1F:E2:18:3B:53:36:AB:42
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       38A70C659BE85D901B84CE55829646CD9A3CF586
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32342e302f32342d3234203d3e203237393831.roa
Signing time:             Tue 06 Jan 2026 19:23:55 +0000
ROA not before:           Tue 06 Jan 2026 19:18:55 +0000
ROA not after:            Tue 05 Jan 2027 19:23:55 +0000
asID:                     27981
IP address blocks:        170.80.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a7:0c:65:9b:e8:5d:90:1b:84:ce:55:82:96:46:cd:9a:3c:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Jan  6 19:18:55 2026 GMT
            Not After : Jan  5 19:23:55 2027 GMT
        Subject: CN=2B1A6308EFF988E146AC153A1FE2183B5336AB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:5e:14:58:2e:c3:13:d3:fb:1a:ac:82:4f:
                    28:c1:ff:5f:95:9a:4c:cf:45:8e:b2:e9:a3:3a:39:
                    8b:af:31:5b:c0:d8:e2:2a:39:4e:9a:8b:38:7f:a4:
                    2d:22:16:be:90:2f:9d:aa:ab:4a:00:1a:e6:5f:8a:
                    0a:7e:d0:d2:6a:e9:59:79:10:9d:ad:8d:cf:22:3e:
                    bf:19:6e:7b:4b:f4:c4:43:0a:b9:05:4b:98:bc:0d:
                    17:df:df:87:5a:c5:cb:29:f9:d6:10:11:39:0a:e5:
                    89:ed:3b:83:67:a6:10:f0:70:b1:1a:91:c3:80:a5:
                    79:86:63:d6:dd:fb:02:a3:15:b2:0f:99:13:4e:a2:
                    a6:ab:8a:06:81:65:7a:34:9b:0a:5c:2b:c3:5a:87:
                    a6:4e:50:b3:88:fa:47:d2:ef:96:6c:c1:83:c2:37:
                    53:47:7c:55:ed:46:78:f0:95:93:21:7a:89:77:f5:
                    65:27:14:0f:ee:f2:3f:77:e5:85:b2:3f:2e:ab:3a:
                    f7:95:f5:8a:d9:1f:b0:d4:f0:c2:fd:07:85:cc:8d:
                    e3:62:44:30:5d:79:d4:13:cd:df:fe:3f:bf:7d:94:
                    31:46:53:56:d6:ab:81:3d:66:ac:d7:84:c3:21:e3:
                    67:33:22:3e:93:29:96:e5:1f:d0:3f:5b:8a:2c:40:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1A:63:08:EF:F9:88:E1:46:AC:15:3A:1F:E2:18:3B:53:36:AB:42
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32342e302f32342d3234203d3e203237393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9c:61:75:80:d2:a0:fe:90:76:f7:a8:9a:7d:cf:4e:a5:a1:
         d1:25:2c:19:c7:6a:f8:e5:b0:94:d9:78:78:7a:0b:8f:be:c7:
         4d:09:cc:63:bc:1e:66:bb:30:39:45:6c:ea:56:d6:70:70:5f:
         c9:70:23:28:ce:82:22:bb:0b:70:15:97:6a:f5:d5:13:fe:32:
         37:2a:a0:d1:c9:d6:0a:ed:54:5d:0e:4f:77:e3:28:eb:80:76:
         41:5b:4f:06:c1:18:6d:b1:64:8e:18:3f:70:78:24:6a:ea:95:
         d5:b1:55:8d:b0:5e:df:7e:3e:03:46:c4:30:56:f4:d2:53:b4:
         59:cf:d3:fd:38:97:59:8f:aa:da:76:d2:14:a0:5d:0e:6b:be:
         ff:0e:99:e7:d4:cd:f7:a3:da:a4:c7:8d:98:3d:ad:b7:c1:b7:
         dd:56:fa:53:fc:a0:d8:b2:91:58:09:cd:4c:28:63:ac:19:db:
         b8:5b:35:cf:f9:13:58:3c:1a:51:72:93:f8:12:9b:43:81:7a:
         25:6b:37:e1:da:a7:61:74:49:b3:a0:5b:2c:b0:1e:05:b8:81:
         de:5f:4c:b7:58:18:45:31:d1:4e:e2:a8:9d:1d:91:16:f6:f8:
         5d:32:37:b6:8e:b8:1f:f0:32:53:57:22:4f:01:7c:62:82:e5:
         82:77:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:27:40 2026 by rpki-client